Security+ Authentication Design Concepts

Which of the following is NOT a design principle for secure authentication systems?

• Single sign-on
• Mutual authentication
• Authorization
• Least privilege
• Secure token

Which of the following is an example of multifactor authentication?

• OAuth and OpenID Connect
• Smart card and token
• Biometrics and password
• Password and PIN
• Two-factor authentication

Which of the following authentication protocols is considered the most secure?

• CHAP (Challenge Handshake Authentication Protocol)
• Kerberos
• MAC (Message Authentication Code)
• PAP (Password Authentication Protocol)
• EAP (Extensible Authentication Protocol)

Which type of attack attempts to trick a user into revealing their authentication credentials by impersonating a trustworthy entity?

• Denial of Service (DoS) attack
• Man-in-the-Middle (MitM) attack
• Brute force attack
• Dictionary attack
• Cross-Site Scripting (XSS) attack

Which of the following is a key component in the Kerberos authentication protocol?

• Ticket granting server (TGS)
• Secure Sockets Layer (SSL)
• Public key infrastructure (PKI)
• Challenge-response mechanism
• X.509 certificate

Which of the following is an example of role-based access control (RBAC)?

• Discretionary access control (DAC)
• Mandatory access control (MAC)
• Rule-based access control (RBAC)
• Attribute-based access control (ABAC)
• Group-based access control

Which of the following is a component of two-factor authentication?

• Something you know and something you are
• Something you know and something you have
• Something you can do and something you are
• Something you have and something you can do
• Something you have and something you are

Which of the following authentication mechanisms requires a physical object to be presented for access?

• Two-factor authentication
• Token-based authentication
• Certificate-based authentication
• Single sign-on
• Biometric authentication

Which of the following password policies contributes to stronger authentication security?

• Implementing password salting
• Storing passwords in clear text
• Enforcing complex passwords
• Allowing password reuse
• Requiring frequent password changes

Which of the following is a password authentication protocol that transmits passwords in clear text?

• PAP (Password Authentication Protocol)
• OAuth (Open Authorization)
• NTLM (New Technology LAN Manager)
• LDAP (Lightweight Directory Access Protocol)
• Kerberos